Description
A vulnerability was found in Prestaul skeemas and classified as problematic. This issue affects some unknown processing of the file validators/base.js. The manipulation of the argument uri leads to inefficient regular expression complexity. The patch is named 65e94eda62dc8dc148ab3e59aa2ccc086ac448fd. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-218003.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Prestaul | skeemas | — | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | skeemas | < 1.2.5 | 1.2.5 | GHSA-qv66-f876-vjvr |
References
- https://vuldb.com/?id.218003 vdb-entry technical-description
- https://vuldb.com/?ctiid.218003 signature permissions-required
- https://github.com/Prestaul/skeemas/commit/65e94eda62dc8dc148ab3e59aa2ccc086ac448fd patch